CrowdStrike
CCFR-201B · Question #7
The Process Activity View provides a rows-and-columns style view of the events generated in a detection. Why might this be helpful?
The correct answer is A. The Process Activity View creates a consolidated view of all detection events for that process that. You've hit your limit · resets 12:50am (America/New_York)
Detection Investigation and Triage
Question
The Process Activity View provides a rows-and-columns style view of the events generated in a detection. Why might this be helpful?
Options
- AThe Process Activity View creates a consolidated view of all detection events for that process that
- BThe Process Activity View will show the Detection time of the earliest recorded activity which
- CThe Process Activity View only creates a summary of Dynamic Link Libraries (DLLs) loaded by a
- DThe Process Activity View creates a count of event types only, which can be useful when scoping
How the community answered
(29 responses)- A93% (27)
- B3% (1)
- C3% (1)
Explanation
You've hit your limit · resets 12:50am (America/New_York)
Topics
#Process Activity View#detection events#event analysis#process investigation
Community Discussion
No community discussion yet for this question.